Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uLGnsf7o5_ukgsXKgGmPwFm2Op0.roa
File: uLGnsf7o5_ukgsXKgGmPwFm2Op0.roa (raw, json)
Hash identifier: i5LuyvkgwMvmKoHAve4xdY2kGquc1xde9dtBFZ2iLSU=
Subject key identifier: B8:B1:A7:B1:FE:E8:E7:FB:A4:82:C5:CA:80:69:8F:C0:59:B6:3A:9D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188774B6D8E5E0F5185E5BEC953D518B4FB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uLGnsf7o5_ukgsXKgGmPwFm2Op0.roa
Signing time: Thu 01 Jun 2023 14:10:11 +0000
ROA not before: Thu 01 Jun 2023 14:10:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:77:4b:6d:8e:5e:0f:51:85:e5:be:c9:53:d5:18:b4:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 1 14:10:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8b1a7b1fee8e7fba482c5ca80698fc059b63a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d6:81:b3:6f:41:69:63:60:a4:61:fb:e8:10:
00:14:a8:6f:32:8f:0c:f8:71:13:46:f9:1b:0e:9d:
48:28:9f:fe:d9:f9:b2:03:01:e6:a5:55:11:16:9f:
20:df:fa:c5:63:94:aa:5a:37:f8:8d:22:8f:a5:9a:
6c:2a:72:3a:0b:27:2c:be:11:64:af:52:96:55:3b:
f7:9d:67:40:d7:df:b8:57:09:c4:11:bc:58:cb:a6:
26:46:5a:c1:14:33:6c:12:2a:84:d2:be:5a:d6:76:
26:da:dd:2f:fe:97:fb:fe:ec:9a:7d:c3:65:3c:81:
f0:8e:b9:f4:66:ab:2f:a1:01:a3:ff:e0:fb:26:17:
7a:ca:41:ea:53:3b:7a:9a:27:44:32:8f:bf:79:bb:
bf:7c:22:14:17:8e:f3:23:eb:81:ed:0a:8b:1b:39:
77:6f:41:3e:62:4e:d7:27:f2:58:60:de:d5:c8:bd:
69:cf:79:e0:ce:3c:59:22:89:ca:2b:bc:b3:68:31:
8e:1d:84:f0:87:52:82:5f:bd:47:14:58:69:b3:7c:
ba:9b:f0:72:42:c2:5f:bb:08:e1:9e:0c:83:42:0e:
66:83:04:2c:bc:61:7c:bb:dd:8c:ad:3a:de:19:14:
c4:0a:9d:93:f2:93:d7:e2:20:1d:a2:95:87:b7:c7:
c5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B1:A7:B1:FE:E8:E7:FB:A4:82:C5:CA:80:69:8F:C0:59:B6:3A:9D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uLGnsf7o5_ukgsXKgGmPwFm2Op0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1e:90:b1:32:6b:2b:38:b9:a8:cc:25:a5:34:dd:92:11:08:43:
8b:de:86:5d:d3:1b:32:03:4b:f8:92:fd:a0:ed:84:49:26:12:
00:91:29:7d:56:ae:85:87:71:46:40:72:ec:64:6a:85:66:00:
d7:5b:22:89:f9:10:4e:16:3e:99:12:73:c9:24:08:5c:c0:58:
fa:28:91:74:48:f5:dc:c1:de:4c:bc:1c:d9:f8:80:34:3a:db:
4c:e4:60:d5:ed:87:22:8b:5e:63:65:f1:fd:dc:c4:37:3c:5b:
42:b1:9f:57:fd:f0:c9:58:27:7f:b0:21:e4:64:6c:66:88:d0:
7d:a8:a1:51:4e:6a:b3:b8:13:48:ad:7a:4d:ac:37:7c:f7:4f:
63:c2:04:ef:bc:72:ad:6a:a7:c4:c5:c8:64:ad:85:90:78:81:
b3:c0:ae:21:cc:8d:86:e3:9f:9e:78:20:d0:11:22:f8:93:6e:
f8:7e:31:02:b1:73:2a:ba:d2:6c:71:e7:15:92:2a:38:bd:9d:
a3:29:7b:01:ee:2d:95:ee:9f:df:2b:d9:a6:31:32:0b:53:87:
fa:c5:2f:05:64:96:70:49:bb:c0:18:cd:e0:ea:83:3f:7a:9b:
4f:70:f1:85:ee:3c:2b:2f:af:4b:85:3c:6f:33:98:22:26:37:
31:ec:c0:62
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYh3S22OXg9RheW+yVPVGLT7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjAxMTQxMDExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOGIxYTdiMWZlZThlN2ZiYTQ4MmM1Y2E4MDY5OGZjMDU5YjYzYTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NaBs29BaWNgpGH76BAAFKhvMo8M
+HETRvkbDp1IKJ/+2fmyAwHmpVURFp8g3/rFY5SqWjf4jSKPpZpsKnI6CycsvhFk
r1KWVTv3nWdA19+4VwnEEbxYy6YmRlrBFDNsEiqE0r5a1nYm2t0v/pf7/uyafcNl
PIHwjrn0ZqsvoQGj/+D7Jhd6ykHqUzt6midEMo+/ebu/fCIUF47zI+uB7QqLGzl3
b0E+Yk7XJ/JYYN7VyL1pz3ngzjxZIonKK7yzaDGOHYTwh1KCX71HFFhps3y6m/By
QsJfuwjhngyDQg5mgwQsvGF8u92MrTreGRTECp2T8pPX4iAdopWHt8fF4wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLixp7H+6Of7pILFyoBpj8BZtjqdMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvdUxHbnNmN281X3VrZ3NYS2dHbVB3Rm0yT3AwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAB6QsTJrKzi5qMwlpTTd
khEIQ4vehl3TGzIDS/iS/aDthEkmEgCRKX1WroWHcUZAcuxkaoVmANdbIon5EE4W
PpkSc8kkCFzAWPookXRI9dzB3ky8HNn4gDQ620zkYNXthyKLXmNl8f3cxDc8W0Kx
n1f98MlYJ3+wIeRkbGaI0H2ooVFOarO4E0itek2sN3z3T2PCBO+8cq1qp8TFyGSt
hZB4gbPAriHMjYbjn554INARIviTbvh+MQKxcyq60mxx5xWSKji9naMpewHuLZXu
n98r2aYxMgtTh/rFLwVklnBJu8AYzeDqgz96m09w8YXuPCsvr0uFPG8zmCImNzHs
wGI=
-----END CERTIFICATE-----
Generated at Thu May 1 15:54:54 2025 by rpki-client